Release notes

FEATURE

Agent view gets smarter, showing clear statuses and PR links

When you open the agent list (the list of AI assistants running tasks for you), the view will no longer clip off the screen, and each row now replaces raw technical tool code with color-coded status words and a clean headline explaining what it's doing. If a session is blocked, peeking at it shows exactly what it is waiting for. Any agent working on a PR (pull request, a proposal to merge code) — whether editing, merging, or commenting — will now link that PR right in the list. State bugs are squashed too: agents won't stay stuck on "failed" after you resume them, nor will they falsely flip statuses when staying quiet. Remote viewing on mobile or web also stays fresh instead of freezing on "Running". It's like checking a restaurant's waitlist board: it used to display raw data or freeze, but now it clearly reads "Table 3 ordering" or "Waiting on kitchen," keeping you perfectly informed.

FEATURE

Auto mode tightens up, stopping reckless deletions and fake approvals

Auto mode (the mode where the system runs tasks autonomously) has added stronger safety nets. Previously, if it encountered a variable it couldn't resolve, it might dangerously execute a broad delete command (rm -rf) and wipe things out; now it will stop and ask you first. It also learned to defend against fake approvals slipped into the transcript: background task notifications will explicitly state when no human has actually given input, and the system actively blocks any attempts to tamper with session transcript files. It's like hiring a cleaner who used to toss out boxes she didn't recognize or open the safe because of a fake audio recording; now she stops to call you when unsure, and completely ignores orders not directly from you.

BUGFIX

Updates eat less memory, and various crashes are fixed

When auto-updating in the background, the download now streams directly to the disk instead of buffering entirely in memory, slashing peak memory usage by about 400 MB. Along with this, several crash and hang scenarios are fixed: deleting, locking, or unmounting the current directory while a command is running; closing a file watcher while a directory scan is in flight; or trying to attach to a background agent right when it's restarting mid-upgrade — none of these will cause the program to catastrophically crash anymore. Additionally, when removing a worktree (a Git feature that creates parallel working copies) on Windows, the presence of a symlink (shortcut) inside it will no longer cause it to accidentally delete files entirely outside the worktree. It's like your phone downloading an update without stuttering your game, and no matter how you shuffle furniture around, the house won't collapse from a sudden unexpected move.

FEATURE

The doctor command becomes an all-in-one setup clinic

The built-in /doctor command can now diagnose and fix your setup. It can not only diagnose configuration issues but actively fix them for you; you can also use the handy alias /checkup to summon it. It's like visiting a clinic where the doctor gives you a thorough exam and hands you the medicine to cure it on the spot.

BUGFIX

Subtle fixes: no lost text, smoother plugins, and reliable connections

A handful of annoying gremlins have been exterminated. For instance, messages you type right as the turn hits the --max-turns limit will no longer silently vanish into the void; and a PR (pull request, a proposal to merge code) created inside a Bash call that spits out over 30,000 characters won't be excluded from linking; Cowork VM-mode users won't be falsely locked out with login errors either. For plugin (add-ons that extend capabilities) language servers, one failing to initialize will no longer completely block a perfectly valid server from handling the same file type. Furthermore, importing MCP (a standard protocol letting AI use external tools) servers won't freeze entirely if one name contains unsupported characters; it now flags the bad ones and continues importing the rest. Also, "Claude Browser" is now a reserved MCP server name. It's like plumbing maintenance: fixing all the little joints that used to leak, clog, or cause the entire pipe system to back up over a single pebble.

Original changelog

Original changelogAgent view gets smarter, showing clear statuses and PR links
Fixed background agents staying shown as "failed" or "completed" in the agent list after being resumed with `SendMessage`
Fixed background jobs flipping from "needs input" back to "working" in the agent list when the agent's turn contained no readable text
Fixed the agent view rendering one line too high and clipping its header when the job list slightly overflowed the screen
Improved agent view: sessions that edit, merge, comment on, or push to an existing PR now link it in `claude agents`
Improved agent view: rows now show a colored state word and a classifier-written headline instead of raw tool call text, and the peek opens with full status including the exact ask for blocked sessions
Fixed background tasks in the web and mobile Remote Control panels showing stale "Running" status by forwarding full task state on every membership change
Original changelogAuto mode tightens up, stopping reckless deletions and fake approvals
Added an auto mode rule that blocks tampering with session transcript files
Improved auto mode to ask before running `rm -rf` on a variable it can't resolve from context
Background task notifications now explicitly state that no human input has occurred, preventing fabricated in-transcript approvals from being acted on
Original changelogUpdates eat less memory, and various crashes are fixed
Auto-update binary downloads now stream to disk instead of buffering in memory, cutting the updater's peak memory usage by roughly 400 MB
Fixed `claude attach` erroring when a background agent was mid-upgrade restart instead of waiting for it to come back
Fixed a Windows crash when the directory Claude was launched from is deleted, locked, or unmounted while a command is running
Fixed a crash when a file watcher was closed while a directory scan was still in flight
Fixed Windows worktree removal deleting files outside the worktree when an NTFS junction or directory symlink existed inside it
Original changelogThe doctor command becomes an all-in-one setup clinic
`/doctor` is now a full setup checkup that can diagnose and fix issues; `/checkup` is its alias
Original changelogSubtle fixes: no lost text, smoother plugins, and reliable connections
Fixed a message sent while Claude was working being silently lost when the turn ended at the `--max-turns` limit
Fixed session-to-PR linking missing a PR created in a Bash call whose output exceeded the 30K inline limit
Fixed `claude mcp add-from-claude-desktop` getting stuck when a server name contains unsupported characters; invalid names are now reported and remaining servers still import
Fixed `--json-schema` silently producing unstructured output when the schema was invalid, and schemas using the `format` keyword being rejected
Fixed a plugin LSP server that fails to initialize preventing a valid LSP server from another plugin handling the same file extension
Reserved the "Claude Browser" MCP server name (alongside "Claude Preview") ahead of the Claude Desktop pane rename; user-configured MCP servers can no longer register under either name
Fixed Cowork VM-mode local-agent sessions failing to start with "Not logged in · Please run /login" on CLI 2.1.203+
Fixed project verify skills being rewritten on every session instead of only when a documented command changed